for what you are trying to do, instead of
mytag.* action do if $programname == 'mytag' then action David Lang
Hello everyone, I am sending messages to rsyslog with a specific tag from a set of old scripts, this is the current situation: - The script calls logger -t mytag. - The messages appear with mytag on /var/log/syslog correctly before the message. Now I want to send the messages that contain that tag to a specific file. I will be delivering a config file to /etc/rsyslog.d/00-mytag.conf That file contains the following: ``` mytag.* /var/log/mytag.log ``` But after a `service rsyslog restart` ryslog complains about the syntax, below is the error taken from /var/log/syslog: ``` rsyslogd: [origin software="rsyslogd" swVersion="7.4.4" x-pid="26685" x-info="http://www.rsyslog.com";] exiting on signal 15. rsyslogd: [origin software="rsyslogd" swVersion="7.4.4" x-pid="26940" x-info="http://www.rsyslog.com";] start rsyslogd-2184: action 'mytag' treated as ':omusrmsg:mytag' - please change syntax, 'mytag' will not be supported in the future [try http://www.rsyslog.com/e/2184 ] rsyslogd-3000: user name 'mytag...' too long - ignored rsyslogd-2307: warning: ~ action is deprecated, consider using the 'stop' statement instead [try http://www.rsyslog.com/e/2307 ] rsyslogd-2307: message repeated 2 times: [warning: ~ action is deprecated, consider using the 'stop' statement instead [try http://www.rsyslog.com/e/2307 ]] rsyslogd: rsyslogd's groupid changed to 4 rsyslogd: rsyslogd's userid changed to 101 rsyslogd-2039: Could no open output pipe '/dev/xconsole': No such file or directory [try http://www.rsyslog.com/e/2039 ] ``` Any suggestions would be welcome. Regards, -- Alfredo Palhares GPG/PGP Key Fingerprint 68FC B06A 6C22 8B9B F110 38D6 E8F7 4D1F 0763 CAAD
signature.asc
Description: PGP signature
_______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
_______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
